hurragun
1 Listopad 2011 18:00
#1
Proszę o sprawdzenie logów OTL , komputer strasznie się zawiesza, podczas uruchamiania oraz w grach, po ponownym uruchomieniu komputera, widać tylko czarny ekran. Bardzo proszę o pomoc.
http://www.wklejto.pl/108149
Acorus
1 Listopad 2011 18:59
#2
Odinstaluj VShareToolBar,DigitalPowered Toolbar,Ask Toolbar.Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL SRV - File not found [On_Demand | Stopped] – -- (McSysmon) SRV - File not found [unknown | Stopped] – -- (McShield) SRV - File not found [Disabled | Stopped] – -- (cFosSpeedS) IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=vsl&s={searchTerms}&f=4 IE - HKLM…\URLSearchHook: - No CLSID value found IE - HKLM…\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found IE - HKLM…\URLSearchHook: {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDigi.dll (Conduit Ltd.) IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Yahoo! Search IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://vshare.toolbarhome.com/?hp=df [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://startsear.ch/?aff=1 IE - HKCU…\URLSearchHook: - No CLSID value found IE - HKCU…\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com \GenericAskToolbar.dll (Ask) IE - HKCU…\URLSearchHook: {32b29df0-2237-4370-9a29-37cebb730e9b} - No CLSID value found IE - HKCU…\URLSearchHook: {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDigi.dll (Conduit Ltd.) FF - prefs.js…browser.search.defaultengine: “Web Search” FF - prefs.js…browser.search.defaultenginename: “Web Search” FF - prefs.js…browser.search.order.1: “Web Search” [2011-07-11 19:04:02 | 000,000,633 | ---- | M] () – C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\yfl58uhy.default\searchplugins\startsear.xml [2011-06-09 12:41:48 | 000,081,920 | ---- | M] (vShare.tv ) – C:\Program Files\mozilla firefox\plugins\npvsharetvplg.dll O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (IE5BarLauncherBHO Class) - {78F3A323-798E-4AEA-9A57-88F4B05FD5DD} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O2 - BHO: (DigitalPowered Toolbar) - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDigi.dll (Conduit Ltd.) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com \GenericAskToolbar.dll (Ask) O2 - BHO: (no name) - {F5CC7F02-6F4E-4462-B5B1-394A57FD3E0D} - No CLSID value found. O3 - HKLM…\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKLM…\Toolbar: (DigitalPowered Toolbar) - {b317125e-2f10-4388-bf1f-2c31c6cd89ed} - C:\Program Files\DigitalPowered\tbDigi.dll (Conduit Ltd.) O3 - HKLM…\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com \GenericAskToolbar.dll (Ask) O3 - HKCU…\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (no name) - {32B29DF0-2237-4370-9A29-37CEBB730E9B} - No CLSID value found. O3 - HKCU…\Toolbar\WebBrowser: (VShareToolBar) - {7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} - C:\Program Files\vShare.tv plugin\BarLcher.dll (VShare Inc.) O3 - HKCU…\Toolbar\WebBrowser: (DigitalPowered Toolbar) - {B317125E-2F10-4388-BF1F-2C31C6CD89ED} - C:\Program Files\DigitalPowered\tbDigi.dll (Conduit Ltd.) O3 - HKCU…\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com \GenericAskToolbar.dll (Ask) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta … s-i586.cab (Reg Error: Key error.) MsConfig - StartUpReg: ALLUpdate - hkey= - key= - File not found MsConfig - StartUpReg: avgnt - hkey= - key= - File not found MsConfig - StartUpReg: MyWebSearch Email Plugin - hkey= - key= - File not found MsConfig - StartUpReg: Nowe Gadu-Gadu - hkey= - key= - File not found MsConfig - StartUpReg: NvCplDaemon - hkey= - key= - File not found MsConfig - StartUpReg: Windows Defender - hkey= - key= - File not found MsConfig - StartUpReg: Wisdom-soft AutoScreenRecorder 3.1 Free - hkey= - key= - File not found @Alternate Data Stream - 520 bytes -> C:\ProgramData\TEMP:05EE1EEF @Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:DFC5A2B2 @Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:587EB586 @Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:27790C06 @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:FEBEC560 @Alternate Data Stream - 123 bytes -> C:\ProgramData\TEMP:F9E46E4C @Alternate Data Stream - 119 bytes -> C:\ProgramData\TEMP:4BB26BE9 @Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:8173A019 @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:7AF9CAEB @Alternate Data Stream - 117 bytes -> C:\ProgramData\TEMP:4E6B8D68 @Alternate Data Stream - 114 bytes -> C:\ProgramData\TEMP:A8ADE5D8 @Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:E4FCDFD9 @Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:E344A426 @Alternate Data Stream - 106 bytes -> C:\ProgramData\TEMP:902C6DFA :Commands [emptytemp]
Kliknij Wykonaj skrypt .Zatwierdź restart komputera. Zapisz raport, który pokaże się po restarcie. Następnie uruchom OTL ponownie, tym razem kliknij (Skanuj).
Pokaż nowy log OTL.txt oraz raport z usuwania.
hurragun
1 Listopad 2011 19:42
#3
Acorus
2 Listopad 2011 08:02
#4
Uruchom OTL i w okno (Własne opcje skanowania/Script)wklej:
:OTL FF - prefs.js…keyword.URL: “http://search.conduit.com/ResultsExt.aspx?ctid=CT2031308&SearchSource=2&q= ” [2011-11-01 20:16:56 | 000,000,921 | ---- | M] () – C:\Users\Karol\AppData\Roaming\Mozilla\Firefox\Profiles\yfl58uhy.default\searchplugins\conduit.xml O3 - HKCU…\Toolbar\WebBrowser: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - No CLSID value found. :Commands [emptytemp]
Kliknij Wykonaj skrypt .W OTL użyj opcji Sprzątanie.Przeskanuj progr.Malwarebytes Anti-Malware
http://www.dobreprogramy.pl/Malwarebyte … 13117.html
Zainstaluj aktualizacje do programow wskazanych przez: http://screen317.spywareinfoforum.org/SecurityCheck.exe jako out of date.